On Mon, Jan 06, 2014 at 01:10:09PM -0500, John Smith wrote: > > I think pop3 is dead but recently there was a mail in tech@ > > stating Sunil Nimmagadda develops pop3 daemon closed to > > OpenBSD standards. > > That's a good point. I don't like leaving mails on the server for more than a > day or so, but I don't see why I can't emulate this behavior on IMAP. I had > originally chosen POP3 because OpenBSD came with it batteries-included. > > There's still some research I need to do on my own, but it does look like > dovecot fits the OpenBSD mentality of security first in development.
dovecot has more vulns. than other open source imap implementations all together. Dovecot: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dovecot (31) Cyrus IMAP https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Cyrus-imap (3) etc..
